CVE-2018-1000198

Published: Jun 5, 2018

Modified: Sep 16, 2024

PUBLISHED

Description

A XML external entity processing vulnerability exists in Jenkins Black Duck Hub Plugin 3.1.0 and older in PostBuildScanDescriptor.java that allows attackers with Overall/Read permission to make Jenkins process XML eternal entities in an XML document.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

https://jenkins.io/security/advisory/2018-05-09/#SECURITY-671

x_refsource_CONFIRM

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2018-1000198

Description

Affected Products

References